CUSTOMER PRIVACY NOTICE
- Purpose and Introduction
- Data Protection Principles
- How do we receive your personal data?
- The personal data we collect about you
- Our legal basis for this processing
- How will we use your information?
- How do we process particularly sensitive (special category) data?
- When do we share your personal data?
- How long will we keep your personal data?
- Security
- Will we use your personal data for marketing purposes?
- Where will your personal data be processed?
- Third party websites
- Automated decision making
- Use of Cookies
- Your rights
- Questions
- Contact
- Changes to this Policy
1. PURPOSE AND INTRODUCTION
Parkdean Resorts UK Limited and its associated group companies*1 (“Parkdean Resorts”, “we”, “us”, “our”) are committed to protecting the personal data we hold about you. Personal data is information about you and from which you can be identified. You should read this privacy notice if you are providing us with your personal data. It makes you aware of how and why your personal data will be used, namely for the purposes of purchasing a holiday or holiday home, and how long it will usually be retained for. It provides you with certain information that we must provide under applicable data protection law.*2
1 Parkdean Resorts Limited, GB Holiday Parks Limited, Park Resorts Limited, Manor Park Holiday Park Limited, Southview Leisure Park Limited, South Lakeland Parks Limited, Lake District Leisure Pursuits Limited, Parkdean Holiday Parks Limited, Upperbay Limited, Parkdean Caravan Parks Limited, Southerness Holiday Village Limited, Weststar Holidays Limited and Vauxhall Holiday Park Limited.
2 The UK General Data Protection Regulation (”UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”)
2. DATA PROTECTION PRINCIPLES
We will comply with data protection law and principles, which meansthat your personal data will be:
- Used lawfully, fairly and in a transparent way;
- Collected for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
- Relevant to the purposes we have told you about and limited only to those purposes;
- Accurate and kept up to date;
- Kept only as long as necessary for the purposes we have told you about; and
- Kept securely.
3. HOW DO WE RECEIVE YOUR PERSONAL DATA?
We will collect and process personal data about you in the course of our relationship with you as set out in section 6.
Data collection can be through a variety of channels, including by telephone, via our website, on site in our resorts and via third parties.
Most of the personal data we process is provided to us directly by you for one of the following reasons:
- You have made a booking, purchase or enquiry with us.
- You have signed up for email updates for our latest offers & news.
- You wish to attend, or have attended, an event.
We also receive personal data indirectly, in the following scenarios:
- Where you have signed up for information from a trusted third-party agent promoting our products and services.
- Where you have made a booking with us through one of our trusted third-party agents.
4. THE PERSONAL DATA WE COLLECT ABOUT YOU
We will collect various personal information about you depending on what is needed to fulfil the processing activity. The table below provides some key examples of the personal data we collect:
Type of data |
Description |
Identity Data |
Name, username, age, gender, social media username (if you interact with us through those channels) photographs and your car number plate (may be recorded at some of our parks for the purposes of safety and the prevention of crime). |
Contact Data |
Address, email address and telephone numbers. |
Financial Data |
Bank account and payment card details. |
Transaction Data |
Details about payments to and from you and other details of products and services you have purchased from us. |
Usage |
Information on how you use our website, products and services including details of the bookings or purchases you make (including if usage of your owner membership card if you have one). |
Marketing |
Your preferences in receiving direct marketing communications from us. (These preferences will have been collected directly from us, or via a trusted third party supplier.) |
Profile |
Purchases made by you, your interests, preferences, registration form details, information provided by you in connection with your stay, feedback, competition, and survey responses. |
Images
*CCTV/BWV/ANPR |
Video footage displaying your image (and voice) if you participate in user testing of our products or participate in one of our promotional videos. Footage in which you may feature when you visit one of our premises or parks. *Closed circuit television (CCTV), Body Worn Video (BWV) and Automated Number Plate Recognition (ANPR) |
Accident |
If you have an accident whilst on our premises that we are aware of or you inform us of, we will record details of that accident and any injury you suffer in our accident log. |
Technical |
Information about your computer, tablet or mobile device including IP address, browser type, location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website and our Wifi services. Usage of our website using a cookie file stored on the hard drive of your device being used to access the website. You are able to disable these cookies by changing your browser settings, but this may slow down or prohibit access to certain parts or features of our website. |
5. OUR LEGAL BASIS FOR THIS PROCESSING
Under UK GDPR when we process your personal data, we must have a lawful basis for doing so. We process your personal data using one of the following legal bases:
- Performance of a contract - This means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering such a contract.
- Legitimate interests - Means the interest of our business in conducting and managing it to enable us to give you the best possible service and experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.
- Legal or regulatory obligation - Means processing your data where necessary for compliance with a legal or regulatory obligation to which we are subject.
- Consent - Where you have consented to the processing.
- Vital interests - Where necessary to protect someone’s vital interests (e.g. life or death situation).
6. HOW WILL WE USE YOUR INFORMATION?
We have set out below some of our key processing activities which detail how we use your personal information and the legal bases on which we rely.
Purpose |
Legal Basis (depending on the circumstances) |
To administer booking requests and purchases, including confirming your booking or purchase and otherwise communicating with you about your booking or purchase, for example via email, Live Chat, telephone etc. |
|
To verify your identity, for example, prior to check in we may need to verify your identity via third party supplier YOTI |
|
To manage payments, including payments and any refunds as necessary relating to your holiday or holiday home purchase as well as any pre-bookable activities |
|
The recording of telephone calls for training and monitoring purposes to improve our service and train our people |
|
To provide you with other products and services you request from us |
|
To manage our relationship and to administer your membership to any membership scheme we provide |
|
To help us to provide, review, develop and improve our products and services; this may include contacting you (Including by email) for market research purposes |
|
To use photographs, videos, customer feedback and testimonials for promotional and marketing purposes, as well as user testing of our products |
|
To send you direct marketing communications in order to boost and improve our business and encourage new and repeat bookings (except where you have opt-ed out) |
|
To send you key service messages in relation to your booking or purchase. |
|
To administer and contact you in relation to prize draws, competitions and other promotional activities |
|
To customise our website according to your interests and ensure that content is presented in the most effective manner for your computer, tablet or mobile device |
|
To allow you to participate in interactive features of our service where you have chosen to do so |
|
To use data analytics (including Google, Wifi and similar third parties) to better understand our customers, and for the improvement of our own products and services. Including our website, marketing, customer relationships and experiences, which may include profiling, scoring and segmentation |
|
To address any claims made against us; for example, we may share details of our accident logs and CCTV footage with our insurers and professional advisers in connection with any claim made or likely to be made against us |
|
To comply with any legal or regulatory obligation (Including in connection with a court order) |
|
To enforce or apply the agreements we have with or otherwise concerning you (including agreements between you and us (or one or more of our group companies) |
|
To protect our rights, property or safety or those of our customers, employees or other third parties(e.g. use the use of CCTV/BWV/ANPR at some locations) which may include images and audio |
|
To verify your identity in order to detect and prevent fraud |
|
Please note - In limited circumstances for legitimate business purposes we may use live data for specific testing purposes. We ensure appropriate controls and procedures are implemented and will mask any personal data as far as possible.
This list is not exhaustive and there may be other processing activities where we rely on one of the above legal bases to process a different category of your personal data.
7. HOW DO WE PROCESS PARTICULARLY SENSITIVE (SPECIAL CATEGORY) DATA?
Under UK GDPR some categories of personal data are classified as "special category" data, including health information. Particularly sensitive personal data require higher levels of protection. We need to have further justification for collecting and processing this type of personal data.
We process very limited special category data for our customers and only in limited certain circumstances, for example:
Purpose |
Condition for processing special category data |
Where we or one of our third parties need to verify your identity using biometric technology (which processes physical characteristics for the purposes of identification), for example facial recognition |
|
Where you have suffered an accident or injury and we need to document relevant health information in the accident reporting log |
|
Where you wish to participate in an activity at one of our resorts, and we need to record limited health information prior to your participation |
|
In relation to certain gambling-related activities |
|
In relation to verifying your identity |
|
Where it is necessary in relation to dealing with legal claims which includes: actual or prospective court proceedings; obtaining legal advice; or establishing, exercising or defending legal rights in any other way |
|
Less commonly, we may process this type of information where it is needed to protect your interests (or someone else's interests) and you are not capable of giving your consent, or where you have already made the information public.
8. WHEN DO WE SHARE YOUR PERSONAL DATA?
In connection with the usesreferred in section 6 & 7, we may disclose your personal data to certain third parties, including:
- Other companies and entities within the Parkdean Resorts’ group;
- Trusted third party agents with whom we contract with in relation to the sale of our products and services;
- Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services;
- HMRC, regulators and other authorities who require reporting or processing activities in certain circumstances;
- Finance providers and insurance companies in the event that you purchase a holiday home;
- Third party services providers who provide IT services, wifi, system administration, feedback, marketing and market research services (e.g. to send postal mail, email and SMS, maintain and update our databases of customer details, analyse data, collate feedback, survey information, provide marketing assistance (including online targeted advertising), process card payments, provide customer service and handle claims);
- To a seller or buyer in the event that we sell or buy any business or assets. In these circumstances,wemay disclose personaldata heldby usto the prospective sellerorbuyer of such business or assets. If we or substantially all of our assets are acquired by a third party (or subject to a reorganisation within our corporate group), personal data held by us will be one of the transferred assets;
- Other third parties to whom we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation (including in connection with a court order), or in order to enforce or apply the agreements we have with or otherwise concerning you (including agreements between you and us (or one or more of our group companies); or to protect our rights, property or safety or those of our customers, employees or other third parties; and
- To the police where there is a relevant exemption to assist with the prevention and detection of crime and/or apprehension or an offender.
You should be aware that, if we are requested by the police or any regulatory or government authority investigating suspected illegal activities to access and disclose personal data concerning your activities whilst using our website, we reserve the right to do so. We also reserve the right to disclose personal data to third parties where a complaint arises concerning your use of our website, and that use is deemed by us inconsistent with the terms governing use of our website.
If you require further information about specific third parties we contract with, please contact us so we can provide you what is relevant to your query.
9. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?
We will only keep your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the purpose for which it was collected and the potential risk of harm from unauthorised use or disclosure of your personal data and applicable legal requirements.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
We have a Data and Document Retention policy. If you require further information about our individual retention periods relating to the categories set out in section 6 & 7, please contact us so we can provide you what is relevant to your query.
10. SECURITY
We take the security of your personal data very seriously. We have put in place appropriate security measures to prevent your data from being accidentally lost, used, altered, disclosed, or accessed by those unauthorised. However, we would draw to your attention the fact that the transmission of informationvia the internetis never completely secure. Althoughwe endeavour to protect your personal data, we cannot guarantee its security when transmitted to our website; any transmission is at your own risk.
We restrict access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions andwhere they are subject to a duty of confidentiality.
We have put in place procedures to deal with any personal data breach and will notify you and any applicable Regulator of a breach where we are legally required to do so.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
11. WILL WE USE YOUR PERSONAL DATA FOR MARKETING PURPOSES?
Where you have enquired about booking a holiday or purchasing a holiday home or have booked a holiday or purchased a holiday home, we may have a legitimate business objective in marketing to you to encourage new or repeat purchases. We will do so in compliance with both data protection and E-Privacy laws3.
In accordance with your marketing preferences, we will use your personal data to send you newsletters and othermarketing communications. Wemay also collect information about how you interact with our marketing communications (for example, whether you open emails we send to you). This helps us make our marketing more relevant to our customers
You have the right to object to the receipt of direct marketing at any time. You may do this by sending an email to us at [email protected] and enter 'Unsubscribe' in the subject line and indicating whether you wish to opt out of holiday marketing, holiday home sales marketing or both.
Alternatively, you can unsubscribe from marketing email communications from us by following the unsubscribe instructions in each email that we send out. This will only unsubscribe you from marketing emails. If you wish to unsubscribe from other channels (post, SMS, telephone) please email [email protected]
Please note that you may continue to receive marketing communications for a short period after changing your preferences while our systems are updated. If you opt out of receiving marketing information from us, we may still use your personal data to provide you with important service communications, including communications in relation to any bookings or purchases you make or in relationship to your ownership of a holiday home on a Parkdean Resorts holiday park.
In addition to the above, we may share limited personal data with advertising networks and other third parties to enable those networks and third parties to provide tailored advertising relating to Parkdean Resortsto youwhen you browse the internet and use third party services(such associal media platforms) on the basis of legitimate interests.
3 Including the Privacy and Electronic Communications (EC Directive) Regulations 2003
12. WHERE WILL YOUR PERSONAL DATA BE PROCESSED?
Your personal data may be processed in the United Kingdom (UK) or European Economic Area (EEA) and may occasionally be transferred to third-party suppliers and processed in countries outside the UK and EEA.
We’ll only transfer your data to a recipient that is outside the UK or EEA where we’re permitted to do so by law, such as where the transfer is to a country deemed ‘adequate’ by the UK or is based on standard contractual clauses or some other mechanism recognised and approved by the Information Commissioner’s Office (ICO).
13. THIRD PARTY WEBSITES
This Policy relates only to information that we obtain from you. Our website contains certain links to other websites which may be of interest to you.
If you visit a website operated by a third party through a link included on this website, your information might be used differently by the operator of the linked website. You should look at that website’s privacy policy and take care, particularly if it requires you to submit personal data.
Please also note that we are not responsible for the content that is displayed on these third party websites.
14. AUTOMATED DECISION MAKING
Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention. We are allowed to use automated decision-making in the following circumstances:
- Where it is necessary to perform the contract with you and appropriate safeguards are in place;
- With your explicit consent.
We don’t currently process personal data solely using automated decision making. However, when applying for finance solutions via one of our trusted third parties, for example, a loan to purchase a holiday home, it’s likely such third parties will make an automated decision. Please see the relevant organisation’s own privacy notice for further information.
15. USE OF COOKIES
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Our website uses cookies. For more information, please see our Cookies Policy.
16. YOUR RIGHTS
You have certain legal rights with respect to your personal data. These include the right to:
Request access |
to your personal data (commonly known as a ‘subject access request’). This enables you to receive a copy of the personal data we hold about you. |
Request correction |
of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us. |
Request erasure |
of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure forspecific legal reasons which will be notified to you at the time of your request. |
Object to processing |
of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In certain cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. |
Request restriction of processing |
This enables you to ask us to suspend the processing of your personal data in the following scenarios:
|
Request the transfer |
of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machinereadable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. |
Withdraw consent |
at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case. |
If you wish to exercise any of these rights, please contact Parkdean Resorts Data Protection Team via email: [email protected]
17. QUESTIONS
The Data Protection Officer has responsibility for overseeing compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal data, please contact the Data Protection team. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance.
18. CONTACT
The Data Protection
Officer Parkdean Resorts
One Gosforth Park Way
Gosforth Business Park
Newcastle upon Tyne
NE12 8ET
Telephone 0191 256 0795
Email: [email protected]
19. CHANGES TO THIS PRIVACY NOTICE
This notice was last updated in August 2024 and will be reviewed and updated on an annual basis, or earlier if applicable.